Vuldb Updates

A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4. Impacted is the function hci_cmd_sync_work of the component hci_sync. This manipulation causes use after free. This vulnerability is registered as CVE-2026-68189. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4. This vulnerability affects the function brcmf_pcie_release_scratchbuffers of the component brcmfmac. Executing a manipulation can lead to use after free. The identification of this vulnerability is CVE-2026-68192. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

A vulnerability marked as very critical has been reported in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4. This issue affects the function wilc_parse_assoc_resp_info of the component wilc1000. The manipulation leads to out-of-bounds read. This vulnerability is referenced as CVE-2026-68196. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability classified as very critical has been found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4. The affected element is the function aggr_recv_addba_req_evt of the component ath6kl. This manipulation of the argument win_sz causes out-of-bounds read. This vulnerability is tracked as CVE-2026-68199. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability identified as very critical has been detected in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5. Impacted is the function vivid_update_format_cap/vivid_update_format_out of the component vivid. The manipulation leads to improper input validation. This vulnerability is uniquely identified as CVE-2026-68204. The attack is possible to be carried out remotely. No exploit exists. You should upgrade the affected component.

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5. The affected element is an unknown function of the component v4l2-ctrls. The manipulation results in memory corruption. This vulnerability was named CVE-2026-68206. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4 and classified as very critical. This vulnerability affects the function snd_seq_timer_interrupt of the component ALSA seq. Such manipulation leads to use after free. This vulnerability is documented as CVE-2026-68202. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability identified as very critical has been detected in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4. This impacts the function llsec_do_decrypt_auth of the component mac802154. The manipulation leads to buffer overflow. This vulnerability is listed as CVE-2026-68125. The attack may be initiated remotely. There is no available exploit. You should upgrade the affected component.

A vulnerability marked as very critical has been reported in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4. Affected by this vulnerability is the function ila_csum_adjust_transport/ila_update_ipv6_locator of the component ILA. This manipulation causes use after free. This vulnerability is registered as CVE-2026-68127. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4. This issue affects the function x25_kill_by_neigh of the file net/x25 of the component X.25 Neighbor Handler. The manipulation leads to use after free. This vulnerability is traded as CVE-2026-68137. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4 and classified as very critical. The affected element is the function geneve_changelink of the component geneve. This manipulation causes improper privilege management. This vulnerability is handled as CVE-2026-68142. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4 and classified as very critical. The impacted element is the function pep_get_sb of the component phonet. Such manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2026-68144. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.150/6.12.100/6.18.41/7.1.5/7.2-rc4. It has been classified as critical. This affects an unknown function of the component gve. Performing a manipulation results in allocation of resources. This vulnerability was named CVE-2026-68129. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4. This affects the function message_receive of the file net/iucv/af_iucv.c of the component iucv. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-68140. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.

A vulnerability marked as critical has been reported in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4. This vulnerability affects the function afiucv_hs_callback_syn of the component af_iucv. Performing a manipulation results in null pointer dereference. This vulnerability is cataloged as CVE-2026-68141. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.

A vulnerability described as very critical has been identified in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4. This issue affects the function sl_realloc_bufs/slip_receive_buf of the component slip. Executing a manipulation can lead to out-of-bounds write. This vulnerability is registered as CVE-2026-68143. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.

A vulnerability was found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4 and classified as very critical. Affected is the function fscrypt_get_devices of the component fscrypt. Executing a manipulation can lead to use after free. This vulnerability is handled as CVE-2026-68147. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability labeled as very critical has been found in Linux Kernel up to 6.6.147/6.12.100/6.18.41/7.1.5/7.2-rc4. Impacted is the function find_or_insert_direct_key of the component fscrypt. Executing a manipulation can lead to use after free. This vulnerability is tracked as CVE-2026-68148. The attack can be launched remotely. No exploit exists. The affected component should be upgraded.

A vulnerability labeled as problematic has been found in Apple watchOS up to 9.0.2. Affected is an unknown function of the component AppleMobileFileIntegrity. Executing a manipulation can lead to improper access controls. This vulnerability appears as CVE-2022-42825. The attack requires local access. There is no available exploit. The affected component should be upgraded.

A vulnerability has been found in Apache CloudStack up to 4.20.3.0/4.22.1.0 and classified as very critical. This affects an unknown function of the component UI. The manipulation leads to encoding error. This vulnerability is documented as CVE-2026-61398. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.